CVE-2026-60025

Vulnerability Description

The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection.

Published Date

July 17, 2026

Last Modified

July 17, 2026

CWE ID

CWE-352

Source

NVD

Vendor

joomdonation.com

Product

Events Booking extension for Joomla